Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gBpBsqEslJE4dE-HzS6gczbrFVc.roa
File: gBpBsqEslJE4dE-HzS6gczbrFVc.roa (raw, json)
Hash identifier: x52YBvDy7jZWOfW2dAS4UhWZ1VUtPi3sfw9Qr+uRpBo=
Subject key identifier: 80:1A:41:B2:A1:2C:94:91:38:74:4F:87:CD:2E:A0:73:36:EB:15:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01963D03062C075E81188BDAD1023C755BE6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gBpBsqEslJE4dE-HzS6gczbrFVc.roa
Signing time: Wed 16 Apr 2025 05:12:10 +0000
ROA not before: Wed 16 Apr 2025 05:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.176.0/21 maxlen: 24
151.243.188.0/22 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 05:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:03:06:2c:07:5e:81:18:8b:da:d1:02:3c:75:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 16 05:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=801a41b2a12c949138744f87cd2ea07336eb1557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:99:d7:c8:73:49:05:df:49:3b:58:31:76:
87:04:4a:19:9c:b2:1d:eb:0e:37:34:81:3e:fd:20:
5b:e2:a9:82:05:5d:9a:e4:1e:d9:3a:ac:b8:56:0a:
fe:9c:b2:e8:1d:d0:b1:74:78:00:8a:a2:93:bb:a5:
be:34:74:11:a2:e7:00:53:8c:a4:dd:38:81:0d:ee:
8a:61:06:99:cc:89:c7:db:13:e8:21:ba:93:65:bd:
e5:cd:96:60:d5:e4:f1:99:fc:f1:9f:de:5d:68:17:
8d:b0:aa:2e:79:e7:c6:11:52:27:a8:72:62:01:30:
aa:b7:bf:9d:e8:a3:b8:22:4f:4f:8e:2e:4f:91:1d:
92:d5:f7:79:50:74:6a:4e:14:8a:40:ac:88:6b:0e:
2b:cb:3b:0c:34:bf:ea:8e:ef:01:45:93:79:ec:7a:
a8:29:19:ad:d9:50:53:f9:1c:36:57:40:d4:54:7d:
6d:72:df:c0:e6:b8:28:cf:ed:4e:e6:fb:a5:1d:f2:
7c:f9:a2:06:48:73:3d:23:fb:4f:c0:b7:2e:1b:0a:
5a:c9:a4:47:47:47:c9:80:4d:b4:b7:69:3a:a5:64:
15:91:6e:d2:2f:0f:39:32:19:21:7f:cb:4a:4a:a1:
19:bd:32:a7:da:7c:01:93:ea:63:fa:72:e7:0b:da:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:41:B2:A1:2C:94:91:38:74:4F:87:CD:2E:A0:73:36:EB:15:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gBpBsqEslJE4dE-HzS6gczbrFVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.176.0/21
151.243.188.0-151.243.199.255
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.237.0/24
151.243.239.0/24
151.243.241.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
39:33:34:25:b5:a8:6f:dc:b5:11:79:51:90:73:4f:2b:6e:8a:
10:b5:e8:76:42:bf:f4:51:3c:31:6a:d8:83:90:34:66:05:25:
ee:c0:03:85:57:aa:d6:2a:6e:7d:b4:a2:41:d5:35:1d:7b:9f:
fd:85:fc:57:7d:d7:6d:5d:55:62:93:cd:e4:85:af:8b:ac:79:
45:ed:22:44:b0:42:76:00:3f:12:23:ac:17:fe:c8:ea:6e:76:
d7:85:14:c2:fd:90:eb:53:03:44:3f:cb:21:26:f7:50:4a:4c:
2f:67:89:46:ae:e8:9b:d7:ff:ff:71:aa:07:d3:b5:6d:20:49:
c2:81:4f:a2:2f:5d:bd:ae:35:6f:90:fd:77:ba:bb:3e:1d:58:
b5:8a:f5:37:36:77:3b:3d:ed:be:5d:b7:03:0f:93:30:bd:b7:
c8:e4:4a:36:d8:f3:ae:38:32:4d:cc:7e:d4:bd:2f:13:1d:32:
c4:28:1f:e5:3e:96:7a:c9:f6:4b:c9:72:b4:bb:e6:f1:f3:f3:
cb:16:a8:4f:2d:a0:78:6d:35:1e:5e:3c:61:19:e2:91:2f:da:
7b:bd:90:45:98:46:73:c5:d2:f7:49:87:fe:23:5e:00:3e:92:
48:4a:c1:81:78:5c:8f:51:5f:2b:32:5d:3c:c8:fb:e2:ad:e0:
de:d2:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:06:34 2025 by rpki-client